Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43370D28612A11F0AA695AAEDAE4EC9C.roa
File: 43370D28612A11F0AA695AAEDAE4EC9C.roa (raw, json)
Hash identifier: oGr+sPHzpc57bjrbpT8wtOSaqGRmHsBMIr2h0EwGoyI=
Subject key identifier: 71:E7:0B:82:23:A6:FF:BE:8B:6E:82:91:A9:1D:54:75:26:DF:80:1C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 016533
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43370D28612A11F0AA695AAEDAE4EC9C.roa
Signing time: Tue 15 Jul 2025 03:17:40 +0000
ROA not before: Tue 15 Jul 2025 03:17:35 +0000
ROA not after: Sun 27 Jul 2025 03:17:35 +0000
asID: 149766
IP address blocks: 45.196.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91443 (0x16533)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 15 03:17:35 2025 GMT
Not After : Jul 27 03:17:35 2025 GMT
Subject: CN=6875c853-7ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:74:ac:a3:c8:92:c1:67:75:c6:ad:45:c7:06:
9a:0a:57:1a:5a:80:bf:e6:54:fb:70:2b:c3:ec:5c:
bc:1a:ba:95:20:3d:0b:db:98:d2:5b:fb:a4:b6:75:
55:ca:b6:4b:69:87:eb:2b:f8:e3:35:12:47:7d:c8:
a8:ab:7d:ec:8e:4b:e4:0f:8e:f0:24:73:ab:7b:0c:
bc:eb:d6:81:29:7d:49:27:94:85:c7:e0:ae:c8:7a:
41:ba:78:d6:e7:bc:5a:a0:86:ee:8f:e7:a3:36:66:
23:9d:7e:08:26:a9:35:8a:6c:b4:39:db:cf:ae:99:
04:1c:d6:fe:7b:c8:de:02:c1:72:e1:10:e8:2e:7d:
b2:ee:e2:9a:f4:5a:20:2b:e2:62:9e:d3:34:8a:d6:
0a:1e:ae:bb:86:17:a1:f8:e7:c8:a1:77:31:99:ad:
b6:cc:f0:ad:2b:fc:be:79:89:d4:a1:3e:b7:1c:23:
a3:47:68:6d:c0:a1:a9:1c:df:59:44:2b:dd:61:f1:
ea:1b:10:0f:99:6d:01:21:68:5b:63:75:30:82:8d:
43:51:80:93:2e:99:c9:2b:ad:5c:ea:62:e3:16:4b:
da:f4:ff:c9:3e:f2:c0:e0:6c:31:db:42:58:65:c1:
19:f4:2b:6c:81:d5:66:69:bb:93:70:c9:93:22:ba:
fb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E7:0B:82:23:A6:FF:BE:8B:6E:82:91:A9:1D:54:75:26:DF:80:1C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43370D28612A11F0AA695AAEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.243.0/24
Signature Algorithm: sha256WithRSAEncryption
20:35:f3:93:67:cd:33:82:d0:d0:67:62:02:01:08:78:ba:62:
0a:87:d4:ec:5f:65:0a:82:cb:75:c2:60:8a:1c:64:ac:96:1e:
f5:1e:e6:00:87:5d:8f:d4:ef:0e:52:6a:ae:98:be:b5:73:61:
24:11:26:a6:1a:78:ff:d8:07:f6:b9:ad:36:9a:50:a6:c9:bf:
a6:57:1c:dc:73:6b:65:37:01:4b:39:9e:15:04:e3:62:b8:86:
cc:09:62:a5:52:9d:35:8f:86:d2:cb:dd:46:ca:93:2f:c1:68:
db:3f:0a:c4:d8:0c:10:6d:b3:40:92:db:73:dd:8f:f5:68:10:
df:88:b5:bb:86:bc:76:69:01:e7:5a:56:7f:f4:16:29:82:75:
7c:79:09:75:8e:6b:92:7f:54:13:62:5f:90:45:d5:1e:86:0f:
31:00:7a:59:fe:2b:6e:f2:74:3e:97:c8:01:52:f3:31:2f:1e:
ac:e7:5b:2a:58:69:c8:a5:2e:e6:de:b6:e7:6b:57:6f:eb:6c:
78:66:5d:bc:78:95:26:0f:75:a9:52:29:0b:75:fb:ff:8e:89:
9b:a1:17:4f:cf:b8:68:39:27:6f:78:0b:17:83:5e:a1:8f:12:
c4:3f:58:a5:25:34:cd:6c:65:c3:41:4c:05:b0:c5:cd:8b:a2:
b3:59:1a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 13:48:32 2025 by rpki-client